$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft File: 1A5D93C2B21C390D054872B547EF671BC1112ED5.mft (raw, json) Hash identifier: Wud1VhiLvrxCWK6rjvKeGPoUYz7KK8/xaWiH4OcnlTY= Subject key identifier: E5:90:A2:C8:4A:A8:11:A4:B7:C7:3D:CB:66:B4:9F:0D:9E:93:8C:B8 Authority key identifier: 1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 Certificate issuer: /CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Certificate serial: 78CAE003A6EA6E07847C95E88270AD76AE0094E0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 16:38:28 +0000 Manifest this update: Thu 26 Mar 2026 16:33:28 +0000 Manifest next update: Fri 27 Mar 2026 17:04:28 +0000 Files and hashes: 1: 34332e3235342e3235322e302f32322d3232203d3e20313334373635.roa (hash: YBGoT8mUzeyt/JC8Sh5jlyNBlqC5ecvmhtvHHC0j9gM=) 2: 34332e3232382e37362e302f32322d3232203d3e20313334373635.roa (hash: 0QQ3acV5OGPw111O9u72jjimK1i0jbUIJPcTkw6FNnE=) 3: 3130332e32332e382e302f32322d3232203d3e20313334373635.roa (hash: ln972wvrzSBEORo9DPPeJbIXLsmgp1iIG1BgLmdr5+g=) 4: 3130332e34372e38302e302f32322d3232203d3e20313334373635.roa (hash: kU8ZpTrXY6JeDmKQWJ4S005IDbAoloAT2cFKH9NDoa4=) 5: 3130332e3230332e3134302e302f32322d3232203d3e20313334373635.roa (hash: ZjwDDfmeHi1TdKdCeuuvzyOYx2ipxq03Vh0SPR2jC34=) 6: 1A5D93C2B21C390D054872B547EF671BC1112ED5.crl (hash: sw2ZTMsgkCy2a7Vn6N6L0T7HhkRZu15iNAQgSCq7BxQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:04:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ca:e0:03:a6:ea:6e:07:84:7c:95:e8:82:70:ad:76:ae:00:94:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Validity Not Before: Mar 26 16:33:28 2026 GMT Not After : Mar 27 17:04:28 2026 GMT Subject: CN=E590A2C84AA811A4B7C73DCB66B49F0D9E938CB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:82:12:d5:35:20:5d:7d:67:bd:66:1b:a7:29: 48:e7:13:15:d1:2d:59:fc:c3:51:29:a0:57:d3:1d: 0b:32:0c:dd:94:59:53:38:00:ce:60:c0:79:b6:77: 44:05:bc:e1:c7:1f:9e:68:8f:89:ae:ce:3e:27:bd: e4:74:f1:80:92:85:c2:65:ee:96:a2:36:1b:cb:7f: 51:1c:f4:36:6c:cb:c1:90:8e:2a:19:fe:13:68:58: 58:4a:2e:3b:88:e0:ca:10:f2:05:c8:36:c7:8d:de: 41:52:74:8f:3c:fb:74:fe:a1:06:c0:54:39:0a:3d: bd:20:f7:8c:4b:eb:42:67:ea:8d:cc:72:29:45:11: e5:82:c5:0b:66:e2:4a:c5:e0:64:f9:ab:61:32:88: cb:52:51:55:e3:6f:99:c5:6c:be:b0:d2:5f:19:12: d1:ad:00:3a:8e:d7:db:7f:31:2a:e7:67:9a:51:44: 83:34:88:32:29:54:c4:25:04:90:08:54:65:c4:9c: 19:e4:91:2c:b7:df:5b:23:60:37:3f:bf:ee:db:c6: e3:42:1d:55:27:8f:0d:15:f9:67:3a:2f:4b:e5:0d: 42:43:4b:97:32:ad:0f:d4:81:c3:09:e3:d6:44:6c: d2:70:8b:7b:c7:94:af:7c:81:63:6c:6e:96:df:30: 92:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:90:A2:C8:4A:A8:11:A4:B7:C7:3D:CB:66:B4:9F:0D:9E:93:8C:B8 X509v3 Authority Key Identifier: keyid:1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ce:5f:b9:72:1c:6e:81:92:fd:2c:9f:ed:c8:eb:23:27:38: 23:01:56:11:a3:46:35:9e:15:f2:7d:e1:7a:8e:4f:94:c0:ab: 93:70:44:68:95:ab:89:bc:c3:0f:1c:78:da:44:5a:32:5b:a2: 24:1f:a4:b4:0c:7f:f4:e5:34:15:72:a0:0a:3f:57:a4:5b:db: ac:c8:f4:b8:f5:e4:5f:e9:93:35:bf:8e:38:ce:02:d7:85:ba: 16:68:7c:83:28:9a:8d:94:cd:dc:0b:a8:58:b1:41:85:ca:ed: ce:e1:87:1a:c2:20:f4:2d:56:86:8f:3b:cc:cb:d0:2f:c9:d1: 85:9a:db:05:5d:c1:1b:48:2c:75:a4:0d:d5:cc:e0:e2:da:26: a3:e2:9b:eb:3f:7d:5f:3f:78:c8:6f:f1:b0:1d:24:81:80:2b: d8:30:8d:18:03:58:a6:67:02:43:0c:f3:0b:e9:6a:f2:9e:44: 24:59:f8:c6:43:d2:ed:04:e0:54:54:03:44:1e:ec:be:27:9e: 8f:13:af:c1:8d:b8:c2:06:2d:4e:d0:b2:22:69:58:24:01:9c: f1:20:30:c2:bc:a8:3f:5f:40:7f:16:94:d1:56:6c:dc:f6:7f: 10:d9:07:e7:2a:7f:59:9a:b4:71:02:3a:0f:49:64:aa:b6:ce: ba:c4:2a:23 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeMrgA6bqbgeEfJXognCtdq4AlOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJD MTExMkVENTAeFw0yNjAzMjYxNjMzMjhaFw0yNjAzMjcxNzA0MjhaMDMxMTAvBgNV BAMTKEU1OTBBMkM4NEFBODExQTRCN0M3M0RDQjY2QjQ5RjBEOUU5MzhDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkghLVNSBdfWe9ZhunKUjnExXR LVn8w1EpoFfTHQsyDN2UWVM4AM5gwHm2d0QFvOHHH55oj4muzj4nveR08YCShcJl 7paiNhvLf1Ec9DZsy8GQjioZ/hNoWFhKLjuI4MoQ8gXINseN3kFSdI88+3T+oQbA VDkKPb0g94xL60Jn6o3McilFEeWCxQtm4krF4GT5q2EyiMtSUVXjb5nFbL6w0l8Z EtGtADqO19t/MSrnZ5pRRIM0iDIpVMQlBJAIVGXEnBnkkSy331sjYDc/v+7bxuNC HVUnjw0V+Wc6L0vlDUJDS5cyrQ/UgcMJ49ZEbNJwi3vHlK98gWNsbpbfMJJrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5ZCiyEqoEaS3xz3LZrSfDZ6TjLgwHwYDVR0j BBgwFoAUGl2TwrIcOQ0FSHK1R+9nG8ERLtUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODM1MzUzOC8wLzFBNUQ5M0MyQjIxQzM5MEQwNTQ4NzJCNTQ3RUY2 NzFCQzExMTJFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJDMTExMkVENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgzNTM1MzgvMC8xQTVEOTNDMkIyMUMz OTBEMDU0ODcyQjU0N0VGNjcxQkMxMTEyRUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKc5fuXIcboGS /Syf7cjrIyc4IwFWEaNGNZ4V8n3heo5PlMCrk3BEaJWribzDDxx42kRaMluiJB+k tAx/9OU0FXKgCj9XpFvbrMj0uPXkX+mTNb+OOM4C14W6Fmh8gyiajZTN3AuoWLFB hcrtzuGHGsIg9C1Who87zMvQL8nRhZrbBV3BG0gsdaQN1czg4tomo+Kb6z99Xz94 yG/xsB0kgYAr2DCNGANYpmcCQwzzC+lq8p5EJFn4xkPS7QTgVFQDRB7svieejxOv wY24wgYtTtCyImlYJAGc8SAwwryoP19AfxaU0VZs3PZ/ENkH5yp/WZq0cQI6D0lk qrbOusQqIw== -----END CERTIFICATE-----Generated at Fri Mar 27 06:42:13 2026 by rpki-client